CVE-2007-3882: Undefined Security Weakness

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

CVE-2007-3013: Undefined Security Weakness

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

CVE-2007-3783: Undefined Security Weakness

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

envivocms-sql.txt

Dear [email protected], durito damagelab -duritoatmaildotru- reported SQL injection vulnerability in enVivo!CMS through ID parameter of default.asp. Example: http://www.example.com/default.asp?action=article&ID=-1+or+1=SELECT+TOP+1+username+from+users-- Original message in Russian:...

Sql injection

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...

CVE-2007-3677: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 idsp1.pl, 2 ip.pl, and 3 einsitedirector.pl. NOTE: this issue can be leveraged for path disclosure from resulting error messages...

CVE-2007-3687: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action...

CVE-2007-3682: Undefined Security Weakness

SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3629: Undefined Security Weakness

SQL injection vulnerability in oku.asp in Levent Veysi Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 b.php and 2 account/gallery.php, and other unspecified vectors...

CVE-2007-3609: Undefined Security Weakness

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 b.php and 2 account/gallery.php, and other unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showthread.php or 2 showboard.php...

CVE-2007-3585: Undefined Security Weakness

PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2007-3589: Undefined Security Weakness

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showthread.php or 2 showboard.php...

Sql injection

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3563: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/viewpage.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewpage action to index.php...

CVE-2007-3562: Undefined Security Weakness

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3538

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3538

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...